$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft File: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft (raw, json) Hash identifier: gc9YDTaJHW9VUJDc8lTux+I8xGfK/VJOXDUPeJM9UXs= Subject key identifier: 40:93:CD:58:0A:83:55:55:E5:87:A8:FF:8B:24:9C:9E:B9:6F:39:67 Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C Certificate issuer: /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Certificate serial: 2E11B3B0E4B9762B8500EA627AF43DC2FFE1BD1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft Manifest number: 0375 Signing time: Fri 08 Aug 2025 01:11:11 +0000 Manifest this update: Fri 08 Aug 2025 01:06:11 +0000 Manifest next update: Mon 11 Aug 2025 03:57:11 +0000 Files and hashes: 1: 3130332e3136372e342e302f32332d3234203d3e203137393935.roa (hash: nkgXHJ5vIn9/vQDJ4p+3bqA8uvcYzydpLoR2QR3gRRw=) 2: 28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl (hash: y2tY8X9W5/WK1s2Um6ZJViO3lh9svYEz4XXMK96FD0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:11:b3:b0:e4:b9:76:2b:85:00:ea:62:7a:f4:3d:c2:ff:e1:bd:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C Validity Not Before: Aug 8 01:06:11 2025 GMT Not After : Aug 11 03:57:11 2025 GMT Subject: CN=4093CD580A835555E587A8FF8B249C9EB96F3967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ec:5a:fe:b3:aa:93:a9:58:49:90:a5:09:cc: 41:28:a0:af:10:57:d6:34:89:6a:92:89:41:d0:29: eb:99:83:a3:c2:1e:64:2e:28:72:64:c2:fe:8b:9d: b2:44:b1:e0:1a:a6:1a:4a:ff:48:93:67:0e:8e:d2: 52:cf:77:c6:9f:36:2c:0f:f1:1f:02:ec:96:71:c3: 8b:ce:b6:51:5a:fc:d4:15:b3:55:31:31:cf:a3:19: a9:bf:90:7f:93:d7:a6:4f:d2:4f:3f:4b:c9:27:1e: 1c:e8:9f:ef:76:c4:22:1d:a6:59:45:ca:21:c9:ee: 65:34:6d:13:50:be:47:f3:ad:b6:7e:26:e8:c6:64: 94:c0:3e:8f:04:4b:ad:b1:f7:ab:2f:08:b6:25:6a: b0:49:15:47:bc:68:ba:b3:3e:af:db:8b:24:21:02: 6d:9a:0c:a8:d8:b8:65:f9:21:6e:84:3a:9f:7e:24: 36:c2:38:28:67:a3:8b:af:64:19:74:ad:ca:94:7c: b3:04:3e:5a:92:11:f1:6e:b4:ef:04:27:37:b5:1a: 80:4e:1a:09:f6:d0:67:9b:3e:a5:a3:48:2c:14:6b: 4c:e4:e2:1e:b0:36:04:34:ac:e2:7d:b7:81:b5:c1: a4:60:25:38:5a:b1:f3:d5:5d:92:d1:25:d6:92:c0: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:CD:58:0A:83:55:55:E5:87:A8:FF:8B:24:9C:9E:B9:6F:39:67 X509v3 Authority Key Identifier: keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d8:f1:ce:cc:59:fb:35:a2:a1:da:f0:54:93:89:03:83:f0: 04:06:d5:1e:49:3c:30:9a:6f:21:15:c1:5b:32:57:88:e1:ae: db:b8:8c:c0:45:82:23:2b:8f:12:1d:2a:25:b9:aa:1e:ea:30: a5:d5:7a:44:6e:9e:3c:96:b5:02:cb:92:94:7b:aa:14:21:f4: c2:8f:71:e8:08:7b:19:39:d6:6e:5d:bd:ec:7a:05:78:a3:5a: 35:2e:aa:8a:88:11:aa:54:e2:7d:4c:62:c9:bf:fd:e2:3e:3f: 4a:9b:fc:cf:71:e9:b4:95:40:17:5f:41:6c:3d:c4:c2:ab:bc: 06:ef:5b:2f:a5:62:fc:f8:14:5d:e6:23:9b:a0:9a:3f:90:75: 01:b2:8f:71:3f:98:7f:b0:b7:a6:a0:63:f7:1c:59:d3:1a:5b: df:93:06:df:51:d2:77:33:df:62:1b:22:88:10:36:ea:6e:49: 8a:76:a5:14:57:f7:95:b3:bf:9a:6a:0c:84:c5:64:ff:17:12: 5c:9a:c8:c5:f3:53:48:47:04:e4:f8:93:ea:e0:8c:4f:46:31: 6d:f1:57:03:33:7f:15:f6:f8:57:e8:26:c3:5d:15:64:ca:18: 8b:40:b2:14:8c:64:ed:86:e1:1c:e6:d3:82:03:c4:30:48:5d: d6:cf:52:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhGzsOS5diuFAOpievQ9wv/hvR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx MjkwM0Q3QzAeFw0yNTA4MDgwMTA2MTFaFw0yNTA4MTEwMzU3MTFaMDMxMTAvBgNV BAMTKDQwOTNDRDU4MEE4MzU1NTVFNTg3QThGRjhCMjQ5QzlFQjk2RjM5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX7Fr+s6qTqVhJkKUJzEEooK8Q V9Y0iWqSiUHQKeuZg6PCHmQuKHJkwv6LnbJEseAaphpK/0iTZw6O0lLPd8afNiwP 8R8C7JZxw4vOtlFa/NQVs1UxMc+jGam/kH+T16ZP0k8/S8knHhzon+92xCIdpllF yiHJ7mU0bRNQvkfzrbZ+JujGZJTAPo8ES62x96svCLYlarBJFUe8aLqzPq/biyQh Am2aDKjYuGX5IW6EOp9+JDbCOChno4uvZBl0rcqUfLMEPlqSEfFutO8EJze1GoBO Ggn20GebPqWjSCwUa0zk4h6wNgQ0rOJ9t4G1waRgJThasfPVXZLRJdaSwOWPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQJPNWAqDVVXlh6j/iyScnrlvOWcwHwYDVR0j BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw M0Q3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBjMTRiOTktNGVlNy00MjJhLWIw NjQtZGNhMzIzNmQ2NzU2LzAvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0 OEExMjkwM0Q3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDY8c7MWfs1oqHa8FSTiQOD8AQG1R5JPDCa byEVwVsyV4jhrtu4jMBFgiMrjxIdKiW5qh7qMKXVekRunjyWtQLLkpR7qhQh9MKP cegIexk51m5dvex6BXijWjUuqoqIEapU4n1MYsm//eI+P0qb/M9x6bSVQBdfQWw9 xMKrvAbvWy+lYvz4FF3mI5ugmj+QdQGyj3E/mH+wt6agY/ccWdMaW9+TBt9R0ncz 32IbIogQNupuSYp2pRRX95Wzv5pqDITFZP8XElyayMXzU0hHBOT4k+rgjE9GMW3x VwMzfxX2+FfoJsNdFWTKGItAshSMZO2G4Rzm04IDxDBIXdbPUmU= -----END CERTIFICATE-----Generated at Fri Aug 8 10:12:33 2025 by rpki-client